TWHarrington

" Notice that attachment filtering is an antivirus feature that isn't enabled or installed. Attachment filtering only runs on the Edge Transport server. However, the file filtering functionality that's provided by Microsoft Forefront Protection for Exchange Server includes advanced features that are unavailable in the default Attachment Filter agent that's included with Microsoft Exchange Server 2010 Standard Edition. Forefront Protection for Exchange Server is fully supported on the Hub Transport server role. "

Scott Tosti

I have been an exchange administrator since 1995. I have been blocking all attachments that can deliver a virus since the I love you virus hit. As long as you communicate with your users there is no issue. I use files anywhere so people can move attachments around.

Forefront for Exchange sucks the life out of my proliant server. If I go that route I will do an edge server with Forefront installed. I will say this. The Forefront for Exchange 2010 if fairly easy to use. The hosted solution is as well. It costs less then 1.50 per user per month. You set it and forget it.

One of my user"s requests is to use the Outlook 2007 Junk email folder as the spam quarantine. This works well with Forefront.

Thanks

Scott

A

AndyD_ [MVP]

Yes, I agree. Forefront can be a CPU hog, but it is pretty intuitive and usually " just works" The hosted stuff is nice as well. The nice thing is that is OnPremise and Hosted Forefront kinda work together so that's pretty cool. What is interesting is that sometimes Forefront on the Servers will catch something that the hosted ForeFront missed.

Sounds like you got a plan in place.

M

[MT]

See this help ? i would block executable attachement, and streaming media file extension usually according to company policy
[[ Introducing Attachment Inspection in Transport Rules]] from Exchange team.